Latest 2 major versions are supported and will have a security issues resolved as their minor fixes.

Security vulnerability should be reported via the issues. When adding security issue, please tag it as a critical one.